Vulnerability · Published Jun 17, 2025 · Assigned by redhat

CVE-2025-6196Libgepub: integer overflow in libgepub's epub archive handling

Medium 5.5

In plain English

A medium-severity integer overflow in libgepub. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.2%top 85.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, leading to incorrect memory allocations. This issue causes the application to crash. Known affected usage includes desktop services like Tumbler, which may process malicious files automatically when browsing directories. While no direct remote attack vectors are confirmed, any application using libgepub to parse user-supplied EPUB content could be vulnerable to a denial of service.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	libgepub	no fix listed	DEBIAN-CVE-2025-6196
Debian:13	libgepub	0.7.3-1	DEBIAN-CVE-2025-6196
Debian:14	libgepub	0.7.3-1	DEBIAN-CVE-2025-6196
Ubuntu:22.04:LTS	libgepub	no fix listed	UBUNTU-CVE-2025-6196
Ubuntu:24.04:LTS	libgepub	no fix listed	UBUNTU-CVE-2025-6196

Affected products (as reported)

Vendor	Product	Versions
	libgepub	0 – before 0.7.2
Red Hat	Red Hat Enterprise Linux 7	see references

Weakness: CWE-190 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References

https://access.redhat.com/security/cve/CVE-2025-6196 vdb-entry, x_refsource_REDHAT
RHBZ#2373117 issue-tracking, x_refsource_REDHAT
https://gitlab.gnome.org/GNOME/libgepub/-/issues/18